Question

[Teicu]

Hi,

Please tell me if this tool scans only the main index or there is a option to crawl and test the entire site? I'm sorry to ask, but I haven't seen anything about this.
Thank you

scan4log4shell remote url http://testphp.vulnweb.com -a
[i] Log4Shell Remote Vulnerability Scan
[i] Listening on c832bfasahsi8gnc8r20cednmxoyyyyyr.interact.sh
[i] Start scanning CIDR http://testphp.vulnweb.com
---------
[i] All request to http://testphp.vulnweb.com have been sent
[i] Completed scanning
[i] Waiting for incoming callbacks!
[i] Use ctrl+c to stop the program.

[Teicu]

also, is it possible to scan a text file with multiple URL addresses? i.e scan4log4shell remote urls.txt

Cheers

[hupe1980]

I added the possibility to add targets over stdin.

$ cat target.txt | ./scan4log4shell remote url

or

$ crawler | ./scan4log4shell remote url

Unfortunately, the program does not have its own crawler

[Teicu]

Hi,

That’s great, we can copy and paste on the target.txt file the URLs from Burp. Thank you very much.

Cheers

[Teicu]

it seems it can't stand these commands

cat targets.txt | scan4log4shell remote url 
requires at least 1 arg(s), only received 0

cat targets.txt | scan4log4shell remote

[hupe1980]

Are you using the correct version v1.2.0?

[Teicu]

Oh, I'm really sorry, it seems I was using the old version. my bad!

Thanks

[Teicu]

Works like a charm now!

btw, last question, if the list of url addresses I scan is large, when the scanner finds a vulnerability does it stop or will it report them at the end when it finishes scanning?

[Teicu]

or there is the option instead of interactsh to use Burp collaborator and then we see in real time when it finds an interaction?

[hupe1980]

The scanner does not stop. All targets are always scanned.

Various catchers (TCP, DNS, LDAP) are included. Burp is not yet supported. But you can easily extend it:

scan4log4shell/internal/catcher.go

Lines 18 to 23 in 7816779

	type CallbackCatcher interface {
	Listen(ctx context.Context) error
	Close() error
	Handler(fn CallbackHandlerFunc)
	Addr() string
	}

Your welcome to create a pull request